Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/8gN_JMIGtKEZguAocA496TdK0rw.roa
File: 8gN_JMIGtKEZguAocA496TdK0rw.roa (raw, json)
Hash identifier: ffjqh+cYjBVO+eWskJZGxgGoWQii6hGEHK5mFwo9JtA=
Subject key identifier: F2:03:7F:24:C2:06:B4:A1:19:82:E0:28:70:0E:3D:E9:37:4A:D2:BC
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 01856E2F9519B6701F4C486AA4A90576E944
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/8gN_JMIGtKEZguAocA496TdK0rw.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206194
IP address blocks: 185.188.191.0/24 maxlen: 24
185.188.188.0/23 maxlen: 23
185.188.190.0/24 maxlen: 24
2a0f:e980::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:95:19:b6:70:1f:4c:48:6a:a4:a9:05:76:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2037f24c206b4a11982e028700e3de9374ad2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:e6:00:09:05:06:42:1b:99:41:e2:35:03:
a1:85:80:2f:b6:6b:c1:82:b8:ad:f0:38:ba:6e:5f:
92:50:44:a2:4c:e2:2a:10:e1:b4:01:38:76:b9:97:
4d:50:8a:4a:21:20:d1:0d:ad:e9:c2:bb:b7:e3:b1:
93:e2:26:b3:a7:3f:f6:06:c3:4f:2a:52:39:3e:e3:
7f:1d:81:b9:9c:37:bf:0d:0c:aa:2e:7b:3e:53:06:
4c:33:20:eb:35:1f:e6:66:72:0b:17:64:d4:9e:1e:
61:60:6f:80:47:8a:59:f2:95:78:fc:87:61:2a:61:
44:60:d0:3a:24:ee:da:b5:b9:48:cc:48:22:73:eb:
49:c8:bf:17:2b:45:18:62:fa:f7:76:8c:55:ae:b6:
cc:f2:06:cb:f7:eb:94:5f:9e:2c:45:86:09:c2:0d:
ed:27:b5:48:eb:a1:d0:da:5a:5d:91:02:94:52:71:
7f:4e:26:71:2e:09:c6:cc:90:ab:78:88:8e:81:a7:
28:98:10:27:78:fc:05:a0:4a:5d:a6:2c:90:3b:51:
5c:47:b2:5f:92:39:be:a0:d6:86:e0:d1:bc:d8:66:
a6:4f:06:30:11:77:ef:bf:aa:b8:94:5f:a1:77:d8:
3d:54:c6:eb:59:02:46:da:54:c4:90:82:4b:05:62:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:03:7F:24:C2:06:B4:A1:19:82:E0:28:70:0E:3D:E9:37:4A:D2:BC
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/8gN_JMIGtKEZguAocA496TdK0rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.188.0/22
IPv6:
2a0f:e980::/29
Signature Algorithm: sha256WithRSAEncryption
02:13:5a:d3:68:ff:02:43:10:c9:3a:a3:8d:87:f4:f0:c5:1b:
b0:5b:a3:e4:99:99:f3:a7:29:df:84:b5:20:b9:6f:e6:0f:1f:
c6:8d:a4:28:6e:b1:96:27:64:26:53:b3:6d:6f:4f:b9:cd:c1:
5d:5e:04:db:90:0e:ae:28:64:0f:30:8c:8b:a5:c0:4d:c0:14:
d4:eb:28:a0:72:0f:a2:8c:d3:6a:2a:ef:8c:45:36:61:80:26:
bd:38:98:1d:84:02:57:a7:3b:50:bd:c3:0d:fb:4b:97:8d:1d:
25:88:88:6b:71:49:8d:58:e1:dd:d3:36:ed:d1:42:7a:8b:57:
ca:94:19:fb:2e:e6:5f:d9:2a:22:39:11:31:0f:43:2a:f6:63:
02:96:1d:6c:f1:47:7c:2b:89:17:6d:e9:b8:a9:aa:99:ce:63:
ec:19:bb:53:14:5f:a8:c9:e8:59:20:85:9d:f3:14:ad:7c:09:
ea:81:65:94:c2:5e:e4:33:ea:00:03:cf:b8:a1:95:dd:a2:63:
68:e1:23:17:fa:2e:45:bd:8a:4a:97:8e:92:ee:a7:71:be:b0:
1a:49:e0:a5:ee:73:8d:34:64:32:a6:ec:73:f3:34:b9:e2:43:
3f:7a:fa:22:79:a2:33:13:cd:1f:d1:84:9a:03:76:a1:28:0e:
6a:13:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org